Skip to content

Commit 2aa23a8

Browse files
committed
add pro findings documentation
1 parent 22e2519 commit 2aa23a8

6 files changed

Lines changed: 278 additions & 5 deletions

File tree

460 KB
Loading
350 KB
Loading
501 KB
Loading
488 KB
Loading

docs/content/asset_modelling/engagements_tests/OS__findings.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ Finding views contain a variety of tables to help interpret a Finding’s status
4343
- **Severity**: The severity rating of that Finding, which is applied automatically.
4444
- As mentioned above, DefectDojo automatically translates a security tool’s severity metric into a Severity score for each Finding, which confers an SLA onto the Finding according to your Asset’s SLA configuration.
4545
- **SLA**: The intended due date by which the Finding is intended to be resolved.
46-
- **Status**: The status of the Finding (e.g., Active, Verified, False Positive, Duplicate, Out of SCope, and Under Defect Review).
46+
- **Status**: The status of the Finding (e.g., Active, Verified, False Positive, Duplicate, Out of Scope, and Under Defect Review).
4747
- **Finding type**: Whether the Finding is Static (SAST) or Dynamic (DAST).
4848
- **Date discovered**: The date on which the Finding was discovered.
4949
- **CWE**: The CWE classification of the Finding.
@@ -160,7 +160,7 @@ The ⋮ kebab menu next to Findings contains the following functions:
160160
- **Delete**: Deletes the selected Finding.
161161

162162
#### Attaching Files to Findings
163-
You can attach image files to any Finding to provide visual context — for example, a screenshot of a vulnerability in action or a proof-of-concept image.
163+
You can attach files to any Finding to provide visual context — for example, a screenshot of a vulnerability in action or a proof-of-concept image.
164164

165165
Supported file types include:
166166

@@ -233,7 +233,7 @@ To manually perform Finding Group actions:
233233
1. Navigate to a list of Findings within a Test.
234234
2. Select the Finding(s) you wish to add to a Finding Group by clicking the corresponding checkbox.
235235
3. Click the **Group** checkbox.
236-
4. Click the corresponding action you wish to complete
236+
4. Click the corresponding action you wish to complete.
237237
- **Create**: Creates a Finding Group that includes the selected Findings.
238238
- **Add to**: Adds the selected Findings to a pre-existing Finding Group.
239239
- **Remove from any group**: Removes the selected Findings from any Finding Groups they were previously a part of.
@@ -254,6 +254,8 @@ The adjoining **Create Finding Groups for all Findings** checkbox performs two f
254254

255255
![image](images/osfindings_ss5.png)
256256

257+
If an option is not selected from the Group By dropdown menu during import, no grouping will occur.
258+
257259
If the grouping criteria (e.g., component name, vulnerability ID, etc.) isn’t populated in the Finding, it will not have a group created or be added to a pre-existing Finding Group.
258260

259261
If a scan is imported that reveals 10 Findings that are not grouped, and the same scan is reimported and the Findings are grouped, the first 10 Findings will not be added to that Finding Group (i.e., the Finding Group will only include the 10 Findings from the reimport, not the 10 Findings from the initial and subsequent import).
@@ -294,6 +296,6 @@ More information about DefectDojo’s Report Builder can be found [here](/metric
294296

295297
#### Export Findings
296298

297-
Pages that show a list of Findings or a list of engagements have a CSV and Excel export option in the top-right dropdown menu.
299+
Pages that show a list of Findings or a list of Engagements have a CSV and Excel export option in the top-right dropdown menu.
298300

299-
From any Findings list page, open the dropdown menu in the top-right corner to export the visible Findings as a CSV or Excel file. The list of engagements can also be exported as CSV or Excel using the same dropdown menu on the engagements list page.
301+
From any Findings list page, open the dropdown menu in the top-right corner to export the visible Findings as a CSV or Excel file. The list of Engagements can also be exported as CSV or Excel using the same dropdown menu on the Engagements list page.

0 commit comments

Comments
 (0)